Refine WireGuard client routing and authentication UI

frontend/src/locales/zh-CN.json

@@ -129,6 +129,10 @@
     "noTunnels": "还没有专线",
     "expireTime": "到期时间",
     "localNode": "本机节点",
+    "authMethod": "认证方式",
+    "authUnknown": "未指定",
+    "wgAuthPassword": "客户端账号 + 设备密钥",
+    "wgAuthHint": "客户端账号用于领取设备授权；WireGuard 用密钥握手。手动添加的静态 Peer 仍凭密钥接入。",
     "start": "启动",
     "stop": "停止",
     "started": "已启动",
@@ -768,6 +772,14 @@
           "label": "服务端 VPN 网段地址",
           "tip": "服务端在 VPN 网段中的地址（CIDR）"
         },
+        "auth_mode": {
+          "label": "客户端认证方式",
+          "tip": "账号验证后领取设备授权，隧道使用密钥握手。静态 Peer 仍凭密钥接入；飞书/OIDC 需独立实现客户端回调和用户授权映射。",
+          "options": {
+            "password": "客户端账号 + 设备密钥",
+            "oidc": "第三方 OAuth2 / OIDC（尚未接入）"
+          }
+        },
         "listen_port": {
           "label": "监听端口"
         },
@@ -786,6 +798,10 @@
           "label": "客户端 AllowedIPs",
           "tip": "全流量代理用 0.0.0.0/0；仅内网填内网网段"
         },
+        "latency_probe": {
+          "label": "隧道测速目标",
+          "tip": "可经该专线访问的 IP:端口，如 10.88.0.1:22；未设置时测试公网 223.5.5.5:443。记录 TCP 建链耗时。"
+        },
         "keepalive": {
           "label": "Keepalive(秒)",
           "tip": "NAT 后客户端建议 15–25"